A delegation-dependent application fails for a Protected Users member, although Account is sensitive and cannot be delegated is unchecked. What should the administrator conclude?

Choose the single best answer.

A.Protected Users membership itself can restrict delegation
B.Only the unchecked flag determines every delegation permission
C.The service must use a shared Domain Admin password
D.Membership should be removed from all users without testing

Show the answer and explanation

✓ Correct answer

Protected Users membership itself can restrict delegation

Protected Users supplies delegation restrictions independently of the flag. The flag is not the sole control; a shared administrator service password does not make restricted delegation safe. Assess dependency and a scoped solution rather than removing protection everywhere.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.